Overview

overview

10

Static

static

1

Femetageshuse.exe

windows7-x64

7

Femetageshuse.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Femetageshuse.exe
  • Size 556KB
  • Sample230808-hs7x9sbb27
  • SHA256 24f8a7c390962f0a9094dba45d9000ec7024e87adc7992740311775fcf0bd51d
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

  • NSIS installer 2 IoCs
    installer

File Explorer

  • Femetageshuse.exe
    .exe 556KB

Femetageshuse.exe

  • IMPHASH bd1dc23681f44e733e87b20cf5b908b7
  • SHA256 24f8a7c390962f0a9094dba45d9000ec7024e87adc7992740311775fcf0bd51d
  • MD5 SHA1 SHA512 SSDEEP
windowsx86

PE Signature issue

Digest
02:8a:cf:b8:42:db:0b:9a:54:d9:88:2b:48:f2:81:33:55:80:45:4c:bd:32:d7:1d:71:2b:92:03:43:12:9e:59
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
OU=Episodic Afrundet\ ,O=Pariasauria,L=Tagolsheim,ST=Grand Est,C=FR,1.2.840.113549.1.9.1=#0c17426164657376616d704054617065776f726d732e556e73
Chains

Aug 2, 2023

PE Signature issue

Digest
32:84:df:b9:55:0d:65:e2:7d:85:15:60:87:36:d4:43:1c:68:52:28
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
OU=Episodic Afrundet\ ,O=Pariasauria,L=Tagolsheim,ST=Grand Est,C=FR,1.2.840.113549.1.9.1=#0c17426164657376616d704054617065776f726d732e556e73
Chains

Aug 2, 2023

Minor OS version
Major OS version
Entry point
12843
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths